turbo-pipelines

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill contains commands for installing the Goldsky CLI and Turbo extension via shell pipes (e.g., curl https://goldsky.com | sh). These are legitimate installation methods for the vendor's own tools and target the vendor's official domains.
  • [COMMAND_EXECUTION]: Instructions are provided to use the goldsky CLI for pipeline lifecycle management, such as goldsky turbo validate and goldsky turbo apply. These are standard operational commands for the service.
  • [CREDENTIALS_UNSAFE]: The skill promotes secure practices by instructing users to use Goldsky's secrets management system (goldsky secret create) to handle database and API credentials, rather than hardcoding them in configuration files.
  • [EXTERNAL_DOWNLOADS]: The skill references installation scripts and documentation from the vendor's official web presence (goldsky.com). These downloads are necessary for the skill's primary purpose and originate from a well-known service provider.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 10:46 AM